androidx.camera:camera-mlkit-vision (>=1.2.0-alpha01, <=1.6.0-beta01), androidx.core.uwb:uwb (>=1.0.0-alpha01, <=1.0.0-alpha11) +184 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (>=18.0.0, <=18.0.1)

com.google.android.gms:play-services-basement MAVEN version =18.0.0, =1.2.0-alpha01, =1.0.0-alpha01, =1.0.0-alpha02, =1.1.0-alpha02, =1.0.0-alpha02, =1.0.0-alpha02, =1.0.0-alpha02, =3.26.0, =4.7.1.1, =11.4.2.0, =8.4.3.1, =6.11.0.1, =8.1.3.1, =8.2.4.0 and more Source cves: CVE-2022-2390 Source...

com.google.android.gms:play-services (8.1.0), com.google.android.gms:play-services-ads (8.1.0) +22 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (8.1.0)

com.google.android.gms:play-services-basement MAVEN version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services 8.1.0 -...

com.google.android.gms:play-services-base (17.2.0) potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (17.2.0)

com.google.android.gms:play-services-basement MAVEN version 17.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services-base 17.2.0 Source cves:...

com.google.android.gms:play-services (11.4.2), com.google.android.gms:play-services-ads (11.4.2) +56 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (11.4.2)

com.google.android.gms:play-services-basement MAVEN version 11.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services 11.4.2 -...

com.google.android.gms:play-services (8.4.0), com.google.android.gms:play-services-ads (8.4.0) +23 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (8.4.0)

com.google.android.gms:play-services-basement MAVEN version 8.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services 8.4.0 -...

com.google.android.gms:play-services (8.3.0), com.google.android.gms:play-services-ads (8.3.0) +23 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (8.3.0)

com.google.android.gms:play-services-basement MAVEN version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services 8.3.0 -...

com.google.android.gms:play-services-base (16.1.0), com.google.android.gms:play-services-measurement (>=16.4.0, <=16.5.0) +10 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (16.2.0)

com.google.android.gms:play-services-basement MAVEN version 16.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services-base 16.1.0 -...

com.google.android.gms:play-services (9.2.0), com.google.android.gms:play-services-ads (9.2.0) +50 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (9.2.0)

com.google.android.gms:play-services-basement MAVEN version 9.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services 9.2.0 -...

androidx.media3:media3-exoplayer-ima (1.0.0-alpha01), com.google.ads.interactivemedia.v3:interactivemedia (>=3.22.2, <=3.25.1) +64 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (17.6.0)

com.google.android.gms:play-services-basement MAVEN version 17.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - androidx.media3:media3-exoplayer-ima 1.0.0-alpha01 -...

com.google.android.gms:play-services-base (15.0.0), com.google.android.gms:play-services-flags (15.0.0) +2 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (15.0.0)

com.google.android.gms:play-services-basement MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services-base 15.0.0 -...

com.google.android.gms:play-services-auth-api-phone (>=17.3.0, <=17.5.0), com.google.android.gms:play-services-auth-base (17.1.0) +3 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (17.1.0)

com.google.android.gms:play-services-basement MAVEN version 17.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services-auth-api-phone =17.3.0, =17.1.0...

androidx.camera:camera-mlkit-vision (>=1.2.0-alpha01, <=1.6.0-beta01), androidx.core.uwb:uwb (>=1.0.0-alpha01, <=1.0.0-alpha11) +256 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (>=8.1.0, <=18.0.1)

com.google.android.gms:play-services-basement MAVEN version =8.1.0, =1.2.0-alpha01, =1.0.0-alpha01, =1.0.0-alpha02, =1.0.0-alpha02, =1.0.0-alpha01, =1.0.0-alpha01, =1.0.0-alpha01, =1.0.0-alpha02, =2.2.0-beta01, =2.1.3, =1.0.0, =3.14.0, =4.5.0.0, =4.8.0.2 and more Source cves: CVE-2022-2390 Source...

CVE-2022-1799

Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release...

CVE-2022-1799

CVE-2022-1799 affects the Google Play services SDK, specifically the play-services-basement component. The issue is an incorrect signature trust where a debug version of Google Play services is trusted by the SDK for devices that are non-GMS, enabling potential trust bypass. Public references con...

CVE-2022-1799: Trust Boundary Violation

Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release...

Google Play Services SDK play-services-basement security vulnerability

Google Play services is used by Google Inc. to update Google apps and other applications provided by Google Play. A security vulnerability exists in versions of the Google Play services SDK play-services-basement prior to 2022-05-03, which stems from the fact that its presence of incorrect...